Tailscale is the zero configuration VPN that doesn't go through the public internet.